
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json)
Hash identifier: TPG4jdEt2OpG+ti/u+sPd6SiuxV3POV52tYFvTInyAI=
Subject key identifier: A5:AE:6F:6A:79:4B:66:12:04:DB:2C:34:29:08:C4:B7:E0:B7:57:37
Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
Manifest number: 013D
Signing time: Wed 07 Oct 2026 06:06:45 +0000
Manifest this update: Wed 07 Oct 2026 06:06:44 +0000
Manifest next update: Wed 14 Oct 2026 06:06:44 +0000
Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: iSxjPEHMxpv7SF5XfM/48xpTCjOM/gzf1tNo0hI7ahk=)
2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=)
3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Validity
Not Before: Oct 7 06:06:44 2026 GMT
Not After : Oct 14 06:06:44 2026 GMT
Subject: CN=6ac5e175-4cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:e5:73:0a:bb:09:82:0b:85:ba:fb:da:32:
20:c1:b0:2f:bf:ab:1e:24:6e:06:05:09:2b:19:35:
32:41:ff:ba:eb:b2:f0:02:68:93:4e:e1:fc:35:6a:
a7:c5:dd:98:74:e0:80:3a:fd:00:be:8a:23:a1:a5:
da:83:7a:e9:eb:80:7d:43:0e:c0:8f:31:ba:59:a4:
16:3e:22:5b:f9:27:09:fc:0a:6f:d5:37:09:33:3f:
6b:fc:c9:24:d3:cc:55:52:b9:fc:77:1a:b3:87:bf:
12:31:fc:73:66:44:d9:94:59:6e:53:3a:05:52:de:
33:5f:7d:0a:78:9d:7d:cf:af:70:79:8c:9f:16:04:
5b:77:0e:16:36:84:7c:fc:81:7e:35:32:86:10:35:
48:8b:1a:62:7e:4c:70:47:ae:3f:37:5a:d6:b4:2f:
74:90:7f:cf:5f:a0:c6:a3:2c:d3:f7:96:ea:c8:69:
63:da:b8:f0:41:03:75:b5:94:e0:32:8d:e8:7e:ac:
1e:f6:1b:f9:a3:4a:fd:a4:35:4d:42:f8:eb:47:09:
7e:29:c8:5d:91:af:59:49:9b:f1:99:38:54:34:85:
1a:cb:cd:a9:3b:ef:6c:4b:92:e1:cd:df:03:92:e4:
db:1c:7c:7b:44:38:e9:be:74:b1:20:25:4c:9f:ba:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:6F:6A:79:4B:66:12:04:DB:2C:34:29:08:C4:B7:E0:B7:57:37
X509v3 Authority Key Identifier:
keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:5a:30:69:23:7c:60:5c:03:6a:94:1e:b6:07:69:74:4a:92:
c4:77:c5:ab:ed:a4:c9:87:0c:e4:a3:57:02:ca:2d:4b:82:7d:
50:00:89:cc:9e:ab:0d:8b:57:dd:38:7a:5b:a3:f5:c3:73:5e:
b9:5b:90:fb:39:77:b5:d0:59:8b:82:21:71:a5:be:14:2a:5b:
40:bf:75:a8:8f:34:49:7a:55:16:ab:5b:20:bb:dd:d7:a6:e7:
1e:67:1c:dc:46:a3:f0:8c:06:df:3e:96:bb:cf:4a:15:80:64:
a1:fc:e2:5a:1f:3f:f3:2f:30:e8:24:8a:2a:d6:0f:ad:cf:1b:
7d:ed:ef:4e:7f:61:d4:ea:5e:8b:c2:eb:41:be:e9:a8:59:04:
9a:54:a2:07:0c:a0:2e:19:0b:c9:64:30:10:94:0d:77:0d:cd:
72:75:b3:2b:89:76:21:ce:78:f0:94:bc:89:fe:2d:1d:5e:ca:
5b:be:c6:7c:0b:26:a7:a8:98:b0:f2:27:81:e9:3c:60:f4:36:
23:b3:d2:74:34:5e:c8:8f:74:4f:3b:47:20:74:7e:e1:6c:81:
89:b3:5d:98:24:33:3e:80:de:5c:91:75:e9:ac:8d:28:a4:7e:
0b:49:88:1e:1c:89:45:35:60:97:b5:54:49:7a:12:5b:72:4a:
06:c1:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:00:15 2026 by rpki-client